Key Facts

Remote From:

Full time

Senior (5-10 years)

English

Hard Skills

Cloud Computing SASS Python (Programming Language) Threat Modeling Software Security Test Automation Secure Coding Vulnerability Management Architectural Design Front End (Software Engineering) Application Security Incident Management Process Management Penetration Testing Dependency Analysis Cross-Functional Collaboration Stakeholder Communications Engineering Ethics

Other Skills

•
Dealing With Ambiguity
•
Problem Solving

Roles & Responsibilities

4–7 years of experience building scalable software systems, with a strong emphasis on security engineering, with excellent programming skills (Python required; Go or similar strongly preferred)
Proven experience building internal tools and frameworks used by engineering teams
Proven ability to build security platforms from zero to production scale
Strong judgment translating abstract risk into concrete engineering controls

Requirements:

Design, build, and maintain internal security tools and platforms to improve Ema’s overall security posture
Implement and improve security controls directly into product and platform workflows
Influence engineering architecture and ensure secure-by-design implementations
Own and scale application security programs including SAST, SCA, dependency risk, and custom detection logic

Ema Unlimited

About Ema Unlimited

Ema is an enterprise partner of choice in building and deploying Agentic AI solutions. We are: ›› Simple - Conversationally build AI employees that learn and excel beyond human limits. Multiply your workforce in minutes, not months. ›› Trusted - Take control back by replacing 100s of vulnerable co-pilots with Ema’s secure and compliant employees. Ema can deploy on-prem and is compliant with all leading standards including SOC2, ISO27001, GDPR, HIPAA, NIST ›› Accurate - Achieve the highest accuracy at lowest cost with Ema’s proprietary 2T+ EmaFusionTM model built for the enterprise use cases. The power of 100+ LLMs at your fingertips. Experience the future of work with Ema, every enterprise’s best performing employee. Hire Ema today.

Company type: Scaleup

Founded: 2018

Company size: 51 - 200

Website LinkedIn See all jobs →

Job description

Role Overview: As a Product Security Engineer at Ema, you sit at the intersection of backend engineering and Cloud Security, building systems that bake security directly into Ema’s platform. You’ll design internal tools, influence architecture, and scale application security programs that protect real production workloads. The job demands strong engineering judgment, and InfoSec mindset.

Primary responsibilities

Design, build, and maintain internal security tools and platforms to improve Ema’s overall security posture.
Implement and improve security controls directly into product and platform workflows.
Influence engineering architecture and ensure secure-by-design implementations.
Own and scale application security programs including SAST, SCA, dependency risk, and custom detection logic.
Support penetration testing efforts by validating findings and engineering durable fixes.
Perform threat modeling for new features and systems, translating risks into concrete engineering solutions.

Additional Responsibilities

Develop automation to reduce manual security effort across vulnerability management, access reviews, and incident response.
Conduct secure design and code reviews with a strong focus on exploitable logic flaws and systemic risks.
Build tooling to surface security signals from production systems and dev workflows.

Desired Profile

4–7 years of experience building scalable software systems, with a strong emphasis on security engineering, with excellent programming skills (Python required; Go or similar strongly preferred).
Proven experience building internal tools, and frameworks used by engineering teams.
Proven ability to build security platforms from zero to production scale.
Strong judgment translating abstract risk into concrete engineering controls.
Track record of influencing architecture across product, infra, and reliability teams.
Comfortable owning ambiguous, high-impact security problems end to end.
Experience integrating security into CI/CD pipelines and developer workflows.
Comfortable operating cross-functionally with Product, Engineering, and Infra teams.